← Agence Nationale de Certification Electronique cases
Bugzilla #1663953 · Certificate Problem Report
TunTrust: OCSP unreachable
Agence Nationale de Certification Electronique · RESOLVED
AI Summary
The Agence Nationale de Certification Electronique reported an incident involving their OCSP server being unreachable for approximately 20 hours. The issue arose due to an inadvertent deletion of the OCSP server during a patch management process. The CA took immediate action to restore services and has since implemented measures to prevent recurrence, including a review of their disaster recovery configuration and additional training for technical staff.
Chronology
- OCSP server became unreachable
- Incident reported to Bugzilla
- OCSP server restored
- Automation of patch management process started
Participants
pki@tuntrust.tn
ryan.sleevi@gmail.com
bwilson@mozilla.com
External References
Similar Local Cases
TunTrust: Issue with Valid test Certificate
TunTrust: CRL and OCSP unavailable
DigiCert: Apple: Non-compliant Common Name Length
DigiCert: Encoded HTML entities in attribute values
DigiCert: Failure to provide a preliminary report within 24 hours.
DigiCert: Issuance of Cert with Compromised Key
DigiCert: 4 CRLs unavailable or not responding
DigiCert: Issuance of certs with weak keys (ROCA)